guardian

2.5.0

2.5.0 2.4.1 2.4.0 2.3.2 2.3.1 2.3.0 2.2.4 2.2.3 2.2.2 2.2.1 2.2.0 2.1.2 2.1.1 2.0.0 1.2.1 1.2.0 retired 1.1.1 1.1.0 1.0.1 1.0.0 1.0.0-beta.1 1.0.0-beta.0 0.14.6 0.14.5 0.14.4 0.14.3 retired 0.14.2 0.14.1 0.14.0 0.13.0 0.12.0 0.11.1 0.10.1 0.10.0 0.9.1 0.9.0 0.8.1 0.8.0 0.7.4 0.7.2 0.7.1 0.7.0 0.6.3 0.6.2 0.6.1 0.6.0 0.5.2 0.5.0 0.4.1 0.4.0 0.3.1 0.3.0 0.2.0 0.1.1 0.1.0

Elixir Authentication framework

HexDocs Report package

Current section

4 Advisories

Jump to

Readme 55 Versions 2 Dependencies 36 Dependants 4 Advisories Files Activity

EEF-CVE-2026-55734 CVE-2026-55734 GHSA-9qx2-v587-q3gg

guardian atom exhaustion in Guardian.Permissions.encode_permissions!/1

August 01, 2026

CVSS

6.9 / 10.0 Medium

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H

Affected Versions

>= 2.0.0 and < 2.4.1

References

EEF-CVE-2026-55733 CVE-2026-55733 GHSA-fjr5-7xrc-hmpj

Atom-table exhaustion denial of service in Guardian permissions AtomEncoding via unbounded atom creation

August 01, 2026

CVSS

6.9 / 10.0 Medium

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H

Affected Versions

>= 2.0.0 and < 2.4.1

References

EEF-CVE-2026-55735 CVE-2026-55735 GHSA-7975-hp3r-5qhv

Guardian.revoke/3 acts on unverified token claims, allowing forged-token session revocation

August 01, 2026

CVSS

8.2 / 10.0 High

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected Versions

>= 1.0.0 and < 2.4.1

References

EEF-CVE-2026-54894 CVE-2026-54894 GHSA-xqch-c77q-rgh5

Atom-table exhaustion denial of service in Guardian via unbounded atom creation from binary keys

August 01, 2026

CVSS

6.9 / 10.0 Medium

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H

Affected Versions

>= 0.1.0 and < 2.4.1

References

Checksum

Dependency Config

mix.exs

rebar.config

Gleam

erlang.mk

Package Details

Downloads Last 30 days, all versions

this version

5 252

yesterday

2 368

last 7 days

56 707

all time

16 195 512

Last Updated

Aug 17, 2026

License

MIT

Build Tools

mix

Publisher

hanspagh

Owners

ueberauth

Operator	Description	Example
name:	Match package name. Supports * wildcards and repo/package form	name:phx* or name:hexpm/phoenix
description:	Full-text search of package descriptions	description:auth
depends:	Packages depending on a given package. Supports repo:package form	depends:ecto or depends:hexpm:ecto
build_tool:	Filter by build tool	build_tool:mix
updated_after:	Packages updated after an ISO8601 datetime	updated_after:2025-01-01T00:00:00Z
extra:	Match custom metadata (key,value). Nested keys are separated by commas	extra:license,MIT

guardian

Checksum

Dependency Config

Package Details

Links

Owners

Search filters